@jimhoyd/urlcode 0.4.0-alpha.3 → 0.4.2

package/docs/yaml/middleware.md

@@ -23,7 +23,9 @@ export async function decorate(request, context, next) {
 
 Entries run in declared order before the handler and reverse order afterward.
 Return a Response early to skip downstream code; call `next()` at most once.
-Up to 16 middleware entries share one sandbox/deadline and approved route
-bindings. Native bodies are opaque; preserving them requires retaining original
-status/headers. Return a new Response to replace native content or destination.
+Up to 16 middleware entries share the route's execution mode, one deadline and
+one set of approved route bindings; the mode is the route's `sandbox` field, not
+a per-entry choice. On a `sandbox: true` route native bodies are opaque;
+preserving them requires retaining original status/headers. Return a new
+Response to replace native content or destination.
 YAML response headers apply last. See [middleware](../MIDDLEWARE.md) for details.

package/examples/cookbook/middleware/envelope.mjs

@@ -1,5 +1,7 @@
-// Wrap successful JSON function responses in a stable envelope. Native bodies are
-// opaque and pass through untouched; only readable JSON is rewritten.
+// Wrap successful JSON function responses in a stable envelope. Only a JSON body
+// this chain can actually read is rewritten; everything else passes through
+// untouched -- on a `sandbox: true` route that includes every native body, which
+// the guest cannot read at all.
 export default async function envelope(request, context, next) {
   const response = await next();
   if (!response.ok || !(response.headers.get('content-type') || '').startsWith('application/json')) return response;